Resolves: bug 526141
Bug Description: allow empty groups
Reviewed by: ???
Fix Description: Change groupOfNames and groupOfUniqueNames to allow
groups by changing the member/uniqueMember attribute from MUST to MAY.
NOTE: This is the way it was before 1.2.1 changed it. Also note
that this is a temporary hack until we solve the problem of LDAP
grouping with a better solution, one that eases migration of existing
Platforms tested: RHEL5 x86_64
Flag Day: no
Doc impact: no